US20160110211A1 - Methods And Systems For Forwarding Network Packets Within Virtual Machine Host Systems - Google Patents
Methods And Systems For Forwarding Network Packets Within Virtual Machine Host Systems Download PDFInfo
- Publication number
- US20160110211A1 US20160110211A1 US14/515,043 US201414515043A US2016110211A1 US 20160110211 A1 US20160110211 A1 US 20160110211A1 US 201414515043 A US201414515043 A US 201414515043A US 2016110211 A1 US2016110211 A1 US 2016110211A1
- Authority
- US
- United States
- Prior art keywords
- virtual
- packet
- network
- packets
- host system
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/48—Program initiating; Program switching, e.g. by interrupt
- G06F9/4806—Task transfer initiation or dispatching
- G06F9/4843—Task transfer initiation or dispatching by program, e.g. task dispatcher, supervisor, operating system
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/12—Network monitoring probes
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/20—Arrangements for monitoring or testing data switching networks the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45591—Monitoring or debugging support
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45595—Network integration; Enabling network access in virtual machine instances
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/48—Program initiating; Program switching, e.g. by interrupt
- G06F9/4806—Task transfer initiation or dispatching
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/10—Active monitoring, e.g. heartbeat, ping or trace-route
- H04L43/106—Active monitoring, e.g. heartbeat, ping or trace-route using time related information in packets, e.g. by adding timestamps
Definitions
- This invention relates to network packet communication systems and, more particularly, to network packets communicated within virtual machine host systems.
- Packet-based data networks continue to grow in importance, and it is often desirable to monitor network traffic associated with these packet-based networks on an ongoing basis. To meet these monitoring needs, copies of network packets can be forwarded to diagnostic network packet analysis tools.
- Network packet analysis tools include a wide variety of devices that analyze packet traffic, including traffic monitoring devices, packet sniffers, data recorders, voice-over-IP monitors, intrusion detection systems, network security systems, application monitors and/or any other network management or security tool device or system. Packets are often forwarded to these network packet analysis tools using network hubs, test access ports (TAPs), and/or switched port analyzer (SPAN) ports available on network switches. For example, certain network switches produced by Cisco Systems include SPAN ports to which traffic on the switches are mirrored. It is also noted that other packet monitoring or access methods may also be used to acquire copies of network packets being communicated within a network packet communication infrastructure.
- Certain network communication systems include virtualized processing environments, such as virtual machine (VM) platforms hosted by one or more processing devices, to provide processing resources to user processing systems.
- VM virtual machine
- network cloud resources made available to network-connected systems are often virtualized such that processors or processing cores associated with a server processing platform (e.g., server blade) and/or combinations of such server processing platforms are used to provide software processing instances or virtual machine platforms within cloud server processing systems.
- a virtual machine (VM) platform is an emulation of a particular processing system that is created within software being executed on a VM host hardware system. By creating VM platforms within a VM host hardware system, the processing resources of that VM host hardware system can be more easily shared among network connected systems that desire to use these processing resources.
- FIG. 1 is a block diagram of an example embodiment for a VM host hardware system 100 that communicates through an external network 118 to network infrastructure 150 for a user of the VM host hardware system 100 .
- the VM host hardware system 100 includes a central processing unit (CPU) 102 that runs a VM host operating system 154 .
- An interconnect bridge 108 can also be provided to couple the CPU 102 to additional circuitry and devices within the server system 100 .
- a system oscillator 110 , a real-time clock 112 , a network interface card (NIC) 115 , and other hardware (H/W) 114 can be coupled to the CPU 102 through the interconnect bridge 108 .
- NIC network interface card
- H/W hardware
- the system oscillator 110 can also have a direct connection to the CPU 102 .
- the NIC 115 can also include an oscillator 116 .
- the real-time clock 112 can be implemented using an integrated circuit including real time clock (RTC) circuitry and non-volatile read only memory (NVRAM) integrated within an integrated circuit (IC).
- RTC real time clock
- NVRAM non-volatile read only memory
- the VM host hardware system 100 includes a hypervisor 152 that executes on top of the VM host operating system (OS) 154 .
- This hypervisor 152 provides a virtualization layer including a plurality of VM platforms 156 A, 156 B, 156 C . . . that emulate processing systems and related processing resources.
- VM platform 156 A each of the VM platforms 156 A, 156 B, and 156 C have one or more virtual hardware resources associated with it, such as a virtualized network interface card (NIC) 158 A, a virtualized CPU 160 A, a virtualized real-time clock (RTC) 162 A, and/or other virtualized hardware resources.
- NIC virtualized network interface card
- RTC real-time clock
- the VM host hardware system 100 makes each of the VM platforms 156 A-C available for use by one or more network-connected guest systems through the VM host operating system 154 and the hypervisor 152 . It is noted that the hypervisor 152 provides a management and control virtualization interface layer between the VM platforms 156 A-C and the guest systems using the processing resources provided by the VM platforms 156 A-C.
- the VM host operating system 154 , the hypervisor 152 , the VM guests 156 A-C, and the virtualized hardware resources 158 A/ 160 A/ 162 A can be implemented, for example, as computer-readable instructions stored in a non-transitory data storage medium that are accessed and executed by one or more processing devices, such as the CPU 102 , to perform the functions for the VM host hardware platform 100 .
- FIG. 2 is a block diagram of an embodiment 200 where a virtual switch 204 has been included along with the hypervisor 152 within a virtualization layer 202 .
- the virtualization layer 202 can provide one or more virtualized hardware components, such as for example virtualized input/output (IO) interfaces, virtualized network interfaces, virtualized CPUs, virtualized storage mediums, and/or other virtualized components.
- the virtual switch 204 provides virtual network packet forwarding among the VM platforms 156 A, 156 B, 156 C, and 156 D that are hosted as guest processes within the host operating system 154 .
- the virtual switch 204 communicates with the virtualized NICs 158 A, 158 B, 158 C, and 158 D for the VM guest platforms 156 A, 156 B, 156 C, and 156 D to forward network packets among the VM guest platforms 156 A, 156 B, 156 C, and 156 D and between the VM guest platforms 156 A, 156 B, 156 C, and 156 D and the external network 118 .
- a VM user network infrastructure 150 desires to monitor activity within a virtual environment such as provided by the embodiments in FIGS. 1-2 (Prior Art).
- a virtual processing resources within a cloud-based server system are offered by a controlling entity (e.g., Amazon Web Services) to different user entities that lease, rent, or otherwise pay for server cloud resources from the controlling entity.
- a controlling entity e.g., Amazon Web Services
- the user typically implements packet monitoring within its own local network infrastructure 150 prior to packets being forwarded to the cloud-based server systems or after packets have been received from the cloud-based server systems as the user does not have access to or control the cloud-based network infrastructure.
- monitoring packet activity within a user's rented or leased resources within a cloud-based server system is difficult to achieve.
- Methods and systems for forwarding network packets within virtual machine (VM) host systems are disclosed that provide virtual packet brokers and related virtual test access ports (TAPs) within VM host hardware systems.
- One or more processing devices within the virtual machine (VM) host system are operated to provide at least one virtual machine (VM) platform, at least one virtual test access port (TAP), and a virtual packet broker within a virtualization layer for the VM host system.
- Network packets associated with packet traffic for the at least one VM platform are then received using the at least one virtual TAP and copied network packets for the received network packets are sent from the at least one virtual TAP to the virtual packet broker.
- the virtual packet broker then applies one or more packet content filters to the copied network packets to determine selected packets within the copied network packets to forward to one or more network packet analysis tools. These selected packets are then forwarded to the one or more network packet analysis tools.
- Virtual switches can also be provided within the virtualization layer to forward packets among a plurality of VM platforms and/or external networks. Different features and variations can be implemented, as desired, and related systems and methods can be utilized, as well.
- a method to forward packets within a virtual machine host system includes operating one or more processing devices within a virtual machine (VM) host system to provide at least one virtual machine (VM) platform, at least one virtual test access port (TAP), and a virtual packet broker within a virtualization layer for the VM host system; receiving network packets associated with packet traffic for the at least one VM platform using the at least one virtual TAP; sending copied network packets for the received network packets from the at least one virtual TAP to the virtual packet broker; applying one or more packet content filters within the virtual packet broker to the copied network packets to determine selected packets within the copied network packets to forward to one or more network packet analysis tools; and forwarding the selected packets to the one or more network packet analysis tools.
- VM virtual machine
- TAP virtual test access port
- the method further includes formatting each selected packet with the virtual packet broker to include at least one target tool identifier identifying a network packet analysis tool to which the selected packet will be forwarded.
- the formatting includes at least one of encapsulating the selected packet with a header that includes the target tool identifier, adding a field to the selected packet that includes the target tool identifier, or including the target tool identifier within an existing field for the selected packet.
- the selected packets can be forwarded to at least one external network packet analysis tool through an external network for the VM host system.
- the method also includes configuring the one or more packet content filters using a configuration interface.
- the one or more processing devices are further operated to provide a plurality of VM platforms within the VM host system.
- the one or more processing devices can be operated to provide a plurality of virtual TAPs with at least one virtual TAP being associated with packet traffic for each of the plurality of VM platforms.
- the one or more processing devices can be operated to provide a virtual network switch configured to forward packets among the plurality of VM platforms within the VM host system.
- the method also includes adding a timestamp to each copied network packet to indicate when each copied network packet was received by the virtual switch.
- the one or more content filters can utilize the timestamps to determine the selected packets to forward to one or more network packet analysis tools.
- the selected packets can be forwarded to at least one virtual network packet analysis tool within the virtualization layer, and the virtual network packet analysis tool can perform time-based analysis of the selected packets.
- the method can further include sending results from the time-based analysis to an external network coupled to the VM host system.
- the selected packets can be forwarded to at least one virtual network packet analysis tool within the virtualization layer.
- a virtual machine (VM) host system having virtual packet forwarding including one or more processing devices configured to provide a virtualization layer comprising at least one virtual machine (VM) platform, at least one virtual test access port (TAP), and a virtual packet broker.
- the at least one virtual TAP is configured to receive network packets associated with packet traffic for the at least one VM platform and to send copied network packets for the received network packets to the virtual packet broker.
- the virtual packet broker is configured to apply one or more packet content filters to the copied network packets to determine selected packets within the copied network packets to forward to one or more network packet analysis tools and to forward the selected packets to the one or more network packet analysis tools.
- the virtual packet broker is further configured to format each selected packet to include at least one target tool identifier identifying a network packet analysis tool to receive the selected packet. Still further, the packet broker can be configured to format each of the selected packets with at least one of an encapsulation header that includes the target tool identifier, an additional field that includes the target tool identifier, or a modification to an existing field to include the target tool identifier.
- the virtual packet broker further includes a configuration interface for the one or more packet content filters.
- the one or more processing devices are further configured to provide a plurality of VM platforms within the VM host system, a virtual network switch configured to forward packets among the plurality of VM platforms, and a plurality of virtual TAPs with at least one virtual TAP being associated with packet traffic for each of the plurality of VM platforms.
- the plurality of virtual TAPs are further configured to add a timestamp to each copied network packet to indicate when each copied network packet was received by the virtual switch.
- the one or more network packet analysis tools includes at least one virtual network packet analysis tool within the virtualization layer, and the virtual network packet analysis tool is configured to perform time-based analysis of the selected packets.
- FIG. 1 is a block diagram of an example embodiment for a virtual machine (VM) host hardware system that communicates with an external network.
- VM virtual machine
- FIG. 2 is a block diagram of an embodiment where a virtual switch has been included along with the hypervisor within a virtualization layer for a VM host hardware system.
- FIG. 3 is a block diagram of an example embodiment for a virtual machine (VM) host hardware system having a virtual packet broker and one or more virtual TAPs (test access ports) that forward selected virtual copied packets to one or more virtual and/or external network packet analysis tools.
- VM virtual machine
- FIG. 4 is a block diagram of an example embodiment for a virtual packet broker.
- FIGS. 5A-D are diagrams of example embodiments for virtual copied network packets that are processed and output by a virtual packet broker.
- FIG. 6 is a process flow diagram of an embodiment for forwarding packets to one or more virtual and/or external network packet analysis tools using a virtual packet broker and related virtual TAPs.
- Methods and systems for forwarding network packets within virtual machine (VM) host systems are disclosed that provide virtual packet brokers and related virtual test access ports (TAPs) within VM host hardware systems.
- One or more processing devices within the virtual machine (VM) host system are operated to provide at least one virtual machine (VM) platform, at least one virtual test access port (TAP), and a virtual packet broker within a virtualization layer for the VM host system.
- Network packets associated with packet traffic for the at least one VM platform are then received using the at least one virtual TAP and copied network packets for the received network packets are sent from the at least one virtual TAP to the virtual packet broker.
- the virtual packet broker then applies one or more packet content filters to the copied network packets to determine selected packets within the copied network packets to forward to one or more network packet analysis tools. These selected packets are then forwarded to the one or more network packet analysis tools.
- Virtual switches can also be provided within the virtualization layer to forward packets among a plurality of VM platforms and/or external networks. Further, Different features and variations can be implemented, as desired, and related systems and methods can be utilized, as well.
- virtual switches for network packets in virtual machine (VM) host hardware systems have been used in virtual environments to emulate real physical layer network packet switches.
- the embodiments described herein provide mechanisms for virtual packet brokers and related virtual TAPs (test access ports) that allow for forwarding of packet traffic within the virtualization layer to virtual analysis tools and/or to external analysis tools through an external network.
- FIG. 3 is a block diagram of an example embodiment for a virtual machine (VM) host hardware system 300 having a virtual packet broker 310 and one or more virtual TAPs 308 .
- the virtual TAPs 308 receive packets from one or more virtual tap points 306 A- 306 D within the virtualization layer 302 for the VM host hardware system 300 .
- a tap point 306 A for a first virtual TAP within the virtual TAPs 308 is associated with packet traffic for a first VM guest platform 156 A.
- a tap point 306 B for a second virtual TAP within the virtual TAPs 308 is associated with packet traffic for a second VM guest platform 156 B.
- a tap point 306 C for a third virtual TAP within the virtual TAPs 308 is associated with packet traffic for a third VM guest platform 156 B.
- a tap point 306 D for a fourth virtual TAP within the virtual TAPs 308 is associated with packet traffic for a fourth VM guest platform 156 D.
- the virtual TAPs 308 thereby operate to generate virtual copies of the packet traffic at the respective tap points 306 A-D, and these virtual copied packets 316 are provided by the virtual packet broker 310 .
- the virtual packet broker 310 analyzes the contents of the virtual copied packets 316 and forwards them as one or more packet streams through the virtual switch 304 to one or more virtual packet analysis tools 312 and/or as one or more packet streams through the virtual switch 304 to one or more external analysis tools 314 based upon packet content filters defined within the virtual packet broker 310 .
- the VM host hardware system 300 in part operates in a similar fashion to embodiment 200 of FIG. 2 (Prior Art).
- the VM host hardware system 300 includes a central processing unit (CPU) 102 that runs a host operating system 154 , a system oscillator 110 , a real-time clock 112 , a network interface card (NIC) 115 , and other hardware (H/W) 114 coupled to communicate with the CPU 102 through an interconnect bridge 108 .
- the NIC 115 can also include an oscillator 116 , and the system oscillator 110 can also be directly connected to the CPU 102 .
- the real-time clock 112 can be implemented using an integrated circuit including a real time clock (RTC) circuitry and non-volatile read only memory (RTC/NVRAM).
- the VM host hardware system 400 also includes a hypervisor 152 that executes as part of the virtualization layer 302 on top of the VM host operating system (OS) 154 .
- This hypervisor 152 provides access to a plurality of VM platforms 156 A, 156 B, 156 C, and 156 D that emulate processing systems and related processing resources.
- the VM platforms 156 A, 156 B, 156 C, and 156 D have virtualized network interface cards (vNICs) 158 A, 158 B, 158 C, and 158 D that are coupled to the virtual switch 304 within the virtualization layer 302 .
- vNICs virtualized network interface cards
- one or more additional virtual hardware resources could also be associated with the VM platforms 156 A, 156 B, 156 C, and 156 D such as for example virtualized input/output (IO) interfaces, virtualized network interfaces, virtualized CPUs, virtualized storage mediums, and/or other virtualized components.
- the VM host hardware system 300 makes each of the VM platforms 156 A, 156 B, 156 C, and 156 D available for use by one or more network-connected guest systems.
- the VM host operating system 154 , the hypervisor 152 , the virtualization layer 302 , the virtual switch 304 , the virtual TAPs 308 and related tap points 306 A-D, the virtual packet analysis tools 312 , and the VM guest platforms 206 A-D can be implemented, for example, as computer-readable instructions stored in a non-transitory data storage medium that are accessed and executed by one or more processing devices, such as the CPU 102 , to perform the functions for the VM host hardware platform 300 .
- the virtual switch 304 provides virtual network packet communications among the VM platforms 156 A, 156 B, 156 C, and 156 D that are hosted as guest processes within the host operating system 154 .
- the virtual switch 304 communicates with the virtualized NICs 158 A, 158 B, 158 C, and 158 D for the VM guest platforms 156 A, 156 B, 156 C, and 156 D to forward network packets among the VM guest platforms 156 A, 156 B, 156 C, and 156 D and between the VM guest platforms 156 A, 156 B, 156 C, and 156 D and the external network 118 .
- Virtual copies of the virtual packets within the virtual switch 304 are generated by the virtual TAPs 308 at tap points 306 A-D and forwarded as virtual copied packets 316 to the virtual packet broker 310 .
- the virtual packet broker 310 analyzes and forwards these virtual copied packets 316 based upon forwarding rules defined within the virtual packet broker 310 .
- VM host hardware system 300 can be implemented, for example, using one or more processing devices such as processors and/or configurable logic devices.
- processors e.g., microcontrollers, microprocessors, central processing units, etc.
- processors e.g., microcontrollers, microprocessors, central processing units, etc.
- configurable logic devices such as CPLDs (complex programmable logic devices), FPGAs (field programmable gate arrays), and/or other configurable logic devices can also be programmed to perform desired functionality.
- FIG. 4 is a block diagram of an example embodiment for virtual packet broker 310 .
- the virtual copied packets 316 from the one or more virtual TAPs 310 are received by a virtual TAP (vTAP) interface buffer 402 that can be configured, for example, to store the virtual copied packets 316 .
- a packet parser 404 then analyzes the packets and provides packet contents to one or more packet content filters 406 .
- the packet content filters 406 are defined, for example, using a configuration interface 414 .
- the configuration interface 414 allows for user configuration of the content filters 406 through one or more external interfaces for the VM host hardware system 300 .
- the content filters 406 identify one or more packet analysis tools to receive processed packets based upon the packet contents.
- the packet formatter 408 receives the results of the packet content filter processing and modifies or reformats the packets to include one or more target identifiers (IDs) 410 for packet analysis tools to receive the packets based upon the content filters 406 .
- IDs target identifiers
- the packet formatter 408 can receive a copy of the original virtual copied packet from the vTAP interface buffer 402 .
- the reformatted packets are provided tool interface buffer 412 . Based upon the target tool IDs 410 added to the processed packets, the reformatted packets are then forwarded as one or more packet streams through virtual switch 304 to one or more virtual packet analysis tools 312 and/or as one or more packet streams through virtual switch 304 to one or more external packet analysis tools 314 .
- network packets typically include in part a link layer header (L2), a network layer header (L3), a transport layer header (L4), and a payload, as well as other network layers (e.g., layers within the Open Systems Interconnect (OSI) model for network communications).
- L2 link layer header
- L3 network layer header
- L4 transport layer header
- payload e.g., layers within the Open Systems Interconnect (OSI) model for network communications.
- OSI Open Systems Interconnect
- packets may also have various other fields and information within them, such as fields including error check information, virtual local area network (VLAN) addresses, and/or other information that may be matched and used for filtering.
- information representing the source device may include items such as the IP address of the source device or the MAC (Media Access Control) address of the source device. It is seen, therefore, that a wide variety of source and destination identifying information may be included within the virtual copied packets, as well as other packet related information along with the data included within the payload of the packet.
- the packet content filters 406 utilize one or more selected portions of these packet contents to make decisions about which network analysis tools are to receive copies of the virtual copied packets received through the virtual TAPs 308 . Based upon the packet content filters 406 , the appropriate target tool IDs 410 are added to the processed packets by packet formatter 408 .
- FIG. 5A is a diagram of an example embodiment for a network packet 500 that includes a source identifier (SID) 502 , a destination or target identifier (TID) 504 , and one or more additional fields 506 , such as a timestamp, data payload field, and/or other fields.
- the one or more virtual TAPs 308 can be configured to add or include a timestamp within virtual copied packets to indicate a time at which a virtual TAP receives and makes a copy of the received network packet.
- the network packet 500 represents one example embodiment for one of the virtual copied packets 316 received by the virtual packet broker 310 .
- FIG. 5B is a diagram of an example embodiment of a network packet 510 that has been modified by the packet formatter 408 to include an encapsulation header 512 .
- the encapsulation header 512 is added by the packet formatter 408 and includes a tool identifier (Tool ID) field 514 within which a tool ID is inserted by the packet formatter 408 . This tool ID is used to forward the processed virtual packet 500 to a virtual or external network analysis tool.
- the encapsulation header 512 can also include one or more additional fields 516 , if desired. Further, it is noted that multiple versions of packet 510 could also be generated by packet formatter 408 if the processed packet 500 is to be forwarded to multiple different virtual or external network analysis tools.
- FIG. 5C is a diagram of an example embodiment of a network packet 520 that has been modified by the packet formatter 408 to include an additional field 524 .
- the original target identifier (TID) information can be copied to and stored within this additional field 524 .
- the tool identifier (Tool ID) information can then be inserted into the original field 504 for the processed packet 504 so that it replaces the original target ID information. It is noted that the target ID information could be discarded if not needed. In such an embodiment, the additional field 524 would not be used, and the tool ID would simply replace the original target ID information in field 504 . It is again noted that multiple versions of packet 520 could also be generated by packet formatter 408 if the processed packet 500 is to be forwarded to multiple different virtual and/or external network analysis tools.
- FIG. 5D is a diagram of an example embodiment of a network packet 530 that has been modified by the packet formatter 408 to include the tool ID within a field within the original packet.
- a field 532 within the other fields 506 for the original packet 500 is used to hold the tool ID information.
- the remaining portion 524 for the other fields 506 within the original packet 500 can still be included within the resulting packet 530 .
- multiple versions of packet 530 could also be generated by packet formatter 408 if the processed packet 500 is to be forwarded to multiple different virtual or external network analysis tools.
- FIGS. 5B-D provide example embodiments of techniques that can be used by the packet formatter 408 to add target identifiers (IDs) 410 to the processed packet 500 . It is further noted that other techniques could also be used, as desired.
- FIG. 6 provides a process flow diagram of an embodiment 600 for the operation of a virtual packet broker 310 within a virtual switch 304 to analyze copies of virtual packets and to forward them to one or more packet analysis tools 312 / 314 based upon packet contents.
- an ingress packet is received at the virtual switch 304 .
- a determination is made with a virtual TAP (vTAP) is monitoring one or more packet flows for the packet using a virtual tap point, such as tap points 306 A-D associated with virtual packet traffic for VM guest platforms 156 A-D. If “NO,” then flow passes to block 606 where the packet is forwarded normally by the virtual switch 304 .
- vTAP virtual TAP
- the virtual packet broker 310 tags, encapsulates, or otherwise modifies the virtual copied packet to include a tool identifier (ID) associated with a virtual or external packet analysis tool 312 / 314 to receive the virtual copied packet.
- ID tool identifier
- the virtual copied packet can be designated for multiple tools 312 / 314 depending upon the content filters 406 .
- the tagged/encapsulated packet is forwarded to the appropriate tools 312 / 314 through the virtual switch 304 .
- Other variations and process steps could also be utilized while still taking advantage of the techniques described herein for using a virtual packet broker 310 to identify and direct virtual packets communicate within a virtual switch 304 to one or more network analysis tools 312 / 314 .
- the virtual TAPs 308 can be configured to generate timestamps associated with when virtual network packets enters the virtual switch 304 and/or is received by virtual TAPs 308 at a tap point 306 A-D. As such, the virtual TAPs 308 can generate timestamps when a virtual packet is received by the virtual switch 304 and can also record a residence time for a virtual packet to travel across the virtual switch 304 . The arrival timestamp and/or the residence time can then be added to the virtual copied packet. The virtual packet broker 310 can use this additional timestamp and/or residence time information along with other packets contents to determine which virtual copied packets are to be forwarded to one or more virtual/external packet analysis tools 312 / 314 .
- the virtual packet broker can be configured to apply a packet content filter that forwards only certain frames within a packet flow (e.g., key frames in video traffic, control packets in telecom traffic) to packet analysis tools.
- a packet content filter that forwards only certain frames within a packet flow (e.g., key frames in video traffic, control packets in telecom traffic) to packet analysis tools.
- only selected packets within a packet flow can be forwarded based upon a time-based parameter such as 1 packet within every 1000 packets, 1 packet for every 100 milliseconds of packets, and/or based upon some other time-based parameter.
- the virtual packet broker 310 then generates new packets and/or adds the timestamp and/or residence time to new packets prior to sending them to a network analysis tool 312 / 314 .
- the virtual packet broker 310 can also drop or discard data within the packet that is not to be used in further processing.
- Other variations can also be implemented while still utilizing the virtual packet broker embodiments described herein.
- a virtual network packet analysis tool 312 can be configured to collect and analyze timing information relating to the virtual copied packets such as delay, latency, PDV (packet delay variation), and/or other time related information.
- timing information relating to the virtual copied packets such as delay, latency, PDV (packet delay variation), and/or other time related information.
- the virtual analysis tool 312 alleviates the need to provide actual packet analysis tools within the physical network infrastructure. As such, congestion on physical ports is reduced, thereby improving performance of other packet traffic that is being communicated on physical network infrastructure and/or externally to the external network 118 .
- the timing based analysis is performed within the virtual environment of the VM host hardware system 300 by using a virtual monitoring tool 312 in the VM virtualization layer 302 that also includes the virtual switch 304 , the virtual packet broker 306 , and the virtual TAPs 308 .
- the results of the analysis of virtual network packet analysis tools 312 can also be sent to external monitoring tools and/or other external systems, as desired, after the analysis has been completed, thereby minimizing the network packet traffic required on the physical network infrastructure.
- operational and functional blocks described herein can be implemented using hardware, software or a combination of hardware and software, as desired.
- integrated circuits, discrete circuits or a combination of discrete and integrated circuits can be used, as desired, that are configured to perform the functionality described.
- configurable logic devices can be used such as CPLDs (complex programmable logic devices), FPGAs (field programmable gate arrays), ASIC (application specific integrated circuit), and/or other configurable logic devices.
- processors running software or firmware could also be used, as desired.
- computer readable instructions embodied in a tangible medium could be utilized including instructions that cause computer systems, processors, programmable circuitry (e.g., FPGAs, CPLDs), and/or other processing devices to perform the processes, functions, and capabilities described herein.
- a tangible medium e.g., memory storage devices, FLASH memory, random access memory, read only memory, programmable memory devices, reprogrammable storage devices, hard drives, floppy disks, DVDs, CD-ROMs, and/or any other tangible storage medium
- processors e.g., programmable circuitry (e.g., FPGAs, CPLDs), and/or other processing devices to perform the processes, functions, and capabilities described herein.
- one or more of the tasks, functions, or methodologies described herein may be implemented, for example, as software or firmware and/or other instructions embodied in one or more non-transitory tangible computer readable mediums that are executed by a CPU (central processing unit), controller, microcontroller, processor, microprocessor, FPGA, CPLD, ASIC, or other suitable processing device or combination of such processing devices.
- CPU central processing unit
- controller microcontroller
- processor microprocessor
- FPGA field-programmable gate array
- CPLD CPLD
- ASIC application specific integrated circuitry
Abstract
Description
- This invention relates to network packet communication systems and, more particularly, to network packets communicated within virtual machine host systems.
- Packet-based data networks continue to grow in importance, and it is often desirable to monitor network traffic associated with these packet-based networks on an ongoing basis. To meet these monitoring needs, copies of network packets can be forwarded to diagnostic network packet analysis tools. Network packet analysis tools include a wide variety of devices that analyze packet traffic, including traffic monitoring devices, packet sniffers, data recorders, voice-over-IP monitors, intrusion detection systems, network security systems, application monitors and/or any other network management or security tool device or system. Packets are often forwarded to these network packet analysis tools using network hubs, test access ports (TAPs), and/or switched port analyzer (SPAN) ports available on network switches. For example, certain network switches produced by Cisco Systems include SPAN ports to which traffic on the switches are mirrored. It is also noted that other packet monitoring or access methods may also be used to acquire copies of network packets being communicated within a network packet communication infrastructure.
- Certain network communication systems include virtualized processing environments, such as virtual machine (VM) platforms hosted by one or more processing devices, to provide processing resources to user processing systems. For example, network cloud resources made available to network-connected systems are often virtualized such that processors or processing cores associated with a server processing platform (e.g., server blade) and/or combinations of such server processing platforms are used to provide software processing instances or virtual machine platforms within cloud server processing systems. A virtual machine (VM) platform is an emulation of a particular processing system that is created within software being executed on a VM host hardware system. By creating VM platforms within a VM host hardware system, the processing resources of that VM host hardware system can be more easily shared among network connected systems that desire to use these processing resources.
-
FIG. 1 (Prior Art) is a block diagram of an example embodiment for a VMhost hardware system 100 that communicates through anexternal network 118 tonetwork infrastructure 150 for a user of the VMhost hardware system 100. For the example embodiment depicted, the VMhost hardware system 100 includes a central processing unit (CPU) 102 that runs a VMhost operating system 154. Aninterconnect bridge 108 can also be provided to couple theCPU 102 to additional circuitry and devices within theserver system 100. For example, asystem oscillator 110, a real-time clock 112, a network interface card (NIC) 115, and other hardware (H/W) 114 can be coupled to theCPU 102 through theinterconnect bridge 108. Thesystem oscillator 110 can also have a direct connection to theCPU 102. The NIC 115 can also include anoscillator 116. The real-time clock 112 can be implemented using an integrated circuit including real time clock (RTC) circuitry and non-volatile read only memory (NVRAM) integrated within an integrated circuit (IC). - The VM
host hardware system 100 includes ahypervisor 152 that executes on top of the VM host operating system (OS) 154. Thishypervisor 152 provides a virtualization layer including a plurality ofVM platforms VM platform 156A, each of theVM platforms CPU 160A, a virtualized real-time clock (RTC) 162A, and/or other virtualized hardware resources. The VMhost hardware system 100 makes each of the VMplatforms 156A-C available for use by one or more network-connected guest systems through the VMhost operating system 154 and thehypervisor 152. It is noted that thehypervisor 152 provides a management and control virtualization interface layer between theVM platforms 156A-C and the guest systems using the processing resources provided by theVM platforms 156A-C. It is further noted that the VMhost operating system 154, thehypervisor 152, the VMguests 156A-C, and the virtualizedhardware resources 158A/160A/162A can be implemented, for example, as computer-readable instructions stored in a non-transitory data storage medium that are accessed and executed by one or more processing devices, such as theCPU 102, to perform the functions for the VMhost hardware platform 100. -
FIG. 2 (Prior Art) is a block diagram of anembodiment 200 where avirtual switch 204 has been included along with thehypervisor 152 within avirtualization layer 202. Thevirtualization layer 202 can provide one or more virtualized hardware components, such as for example virtualized input/output (IO) interfaces, virtualized network interfaces, virtualized CPUs, virtualized storage mediums, and/or other virtualized components. Thevirtual switch 204 provides virtual network packet forwarding among theVM platforms host operating system 154. In particular, thevirtual switch 204 communicates with the virtualizedNICs VM guest platforms VM guest platforms VM guest platforms external network 118. - When a VM
user network infrastructure 150 desires to monitor activity within a virtual environment such as provided by the embodiments inFIGS. 1-2 (Prior Art), difficulties arise in utilizing network packet analysis tools. One such example environment is where virtual processing resources within a cloud-based server system are offered by a controlling entity (e.g., Amazon Web Services) to different user entities that lease, rent, or otherwise pay for server cloud resources from the controlling entity. If a user entity desires to monitor its network activity, the user typically implements packet monitoring within its ownlocal network infrastructure 150 prior to packets being forwarded to the cloud-based server systems or after packets have been received from the cloud-based server systems as the user does not have access to or control the cloud-based network infrastructure. As such, monitoring packet activity within a user's rented or leased resources within a cloud-based server system is difficult to achieve. - Methods and systems for forwarding network packets within virtual machine (VM) host systems are disclosed that provide virtual packet brokers and related virtual test access ports (TAPs) within VM host hardware systems. One or more processing devices within the virtual machine (VM) host system are operated to provide at least one virtual machine (VM) platform, at least one virtual test access port (TAP), and a virtual packet broker within a virtualization layer for the VM host system. Network packets associated with packet traffic for the at least one VM platform are then received using the at least one virtual TAP and copied network packets for the received network packets are sent from the at least one virtual TAP to the virtual packet broker. The virtual packet broker then applies one or more packet content filters to the copied network packets to determine selected packets within the copied network packets to forward to one or more network packet analysis tools. These selected packets are then forwarded to the one or more network packet analysis tools. Virtual switches can also be provided within the virtualization layer to forward packets among a plurality of VM platforms and/or external networks. Different features and variations can be implemented, as desired, and related systems and methods can be utilized, as well.
- In one embodiment, a method to forward packets within a virtual machine host system is disclosed that includes operating one or more processing devices within a virtual machine (VM) host system to provide at least one virtual machine (VM) platform, at least one virtual test access port (TAP), and a virtual packet broker within a virtualization layer for the VM host system; receiving network packets associated with packet traffic for the at least one VM platform using the at least one virtual TAP; sending copied network packets for the received network packets from the at least one virtual TAP to the virtual packet broker; applying one or more packet content filters within the virtual packet broker to the copied network packets to determine selected packets within the copied network packets to forward to one or more network packet analysis tools; and forwarding the selected packets to the one or more network packet analysis tools.
- For other embodiments, the method further includes formatting each selected packet with the virtual packet broker to include at least one target tool identifier identifying a network packet analysis tool to which the selected packet will be forwarded. In additional embodiments, the formatting includes at least one of encapsulating the selected packet with a header that includes the target tool identifier, adding a field to the selected packet that includes the target tool identifier, or including the target tool identifier within an existing field for the selected packet. Further, the selected packets can be forwarded to at least one external network packet analysis tool through an external network for the VM host system. Still further, the method also includes configuring the one or more packet content filters using a configuration interface.
- For further embodiments, the one or more processing devices are further operated to provide a plurality of VM platforms within the VM host system. In addition, the one or more processing devices can be operated to provide a plurality of virtual TAPs with at least one virtual TAP being associated with packet traffic for each of the plurality of VM platforms. Further, the one or more processing devices can be operated to provide a virtual network switch configured to forward packets among the plurality of VM platforms within the VM host system.
- For still further embodiments, the method also includes adding a timestamp to each copied network packet to indicate when each copied network packet was received by the virtual switch. In addition, the one or more content filters can utilize the timestamps to determine the selected packets to forward to one or more network packet analysis tools. For further embodiments, the selected packets can be forwarded to at least one virtual network packet analysis tool within the virtualization layer, and the virtual network packet analysis tool can perform time-based analysis of the selected packets. Still further, the method can further include sending results from the time-based analysis to an external network coupled to the VM host system. For other embodiments, the selected packets can be forwarded to at least one virtual network packet analysis tool within the virtualization layer.
- In one other embodiment, a virtual machine (VM) host system having virtual packet forwarding is disclosed including one or more processing devices configured to provide a virtualization layer comprising at least one virtual machine (VM) platform, at least one virtual test access port (TAP), and a virtual packet broker. The at least one virtual TAP is configured to receive network packets associated with packet traffic for the at least one VM platform and to send copied network packets for the received network packets to the virtual packet broker. And the virtual packet broker is configured to apply one or more packet content filters to the copied network packets to determine selected packets within the copied network packets to forward to one or more network packet analysis tools and to forward the selected packets to the one or more network packet analysis tools.
- For other embodiments, the virtual packet broker is further configured to format each selected packet to include at least one target tool identifier identifying a network packet analysis tool to receive the selected packet. Still further, the packet broker can be configured to format each of the selected packets with at least one of an encapsulation header that includes the target tool identifier, an additional field that includes the target tool identifier, or a modification to an existing field to include the target tool identifier. For additional embodiments, the virtual packet broker further includes a configuration interface for the one or more packet content filters.
- For further embodiments, the one or more processing devices are further configured to provide a plurality of VM platforms within the VM host system, a virtual network switch configured to forward packets among the plurality of VM platforms, and a plurality of virtual TAPs with at least one virtual TAP being associated with packet traffic for each of the plurality of VM platforms. For additional embodiments, the plurality of virtual TAPs are further configured to add a timestamp to each copied network packet to indicate when each copied network packet was received by the virtual switch. For still further embodiments, the one or more network packet analysis tools includes at least one virtual network packet analysis tool within the virtualization layer, and the virtual network packet analysis tool is configured to perform time-based analysis of the selected packets.
- Different and/or additional features, variations, and embodiments can also be implemented, as desired, and related systems and methods can be utilized, as well.
- It is noted that the appended drawings illustrate only example embodiments of the invention and are, therefore, not to be considered limiting of its scope, for the invention may admit to other equally effective embodiments.
-
FIG. 1 (Prior Art) is a block diagram of an example embodiment for a virtual machine (VM) host hardware system that communicates with an external network. -
FIG. 2 (Prior Art) is a block diagram of an embodiment where a virtual switch has been included along with the hypervisor within a virtualization layer for a VM host hardware system. -
FIG. 3 is a block diagram of an example embodiment for a virtual machine (VM) host hardware system having a virtual packet broker and one or more virtual TAPs (test access ports) that forward selected virtual copied packets to one or more virtual and/or external network packet analysis tools. -
FIG. 4 is a block diagram of an example embodiment for a virtual packet broker. -
FIGS. 5A-D are diagrams of example embodiments for virtual copied network packets that are processed and output by a virtual packet broker. -
FIG. 6 is a process flow diagram of an embodiment for forwarding packets to one or more virtual and/or external network packet analysis tools using a virtual packet broker and related virtual TAPs. - Methods and systems for forwarding network packets within virtual machine (VM) host systems are disclosed that provide virtual packet brokers and related virtual test access ports (TAPs) within VM host hardware systems. One or more processing devices within the virtual machine (VM) host system are operated to provide at least one virtual machine (VM) platform, at least one virtual test access port (TAP), and a virtual packet broker within a virtualization layer for the VM host system. Network packets associated with packet traffic for the at least one VM platform are then received using the at least one virtual TAP and copied network packets for the received network packets are sent from the at least one virtual TAP to the virtual packet broker. The virtual packet broker then applies one or more packet content filters to the copied network packets to determine selected packets within the copied network packets to forward to one or more network packet analysis tools. These selected packets are then forwarded to the one or more network packet analysis tools. Virtual switches can also be provided within the virtualization layer to forward packets among a plurality of VM platforms and/or external networks. Further, Different features and variations can be implemented, as desired, and related systems and methods can be utilized, as well.
- As described above, virtual switches for network packets in virtual machine (VM) host hardware systems have been used in virtual environments to emulate real physical layer network packet switches. The embodiments described herein provide mechanisms for virtual packet brokers and related virtual TAPs (test access ports) that allow for forwarding of packet traffic within the virtualization layer to virtual analysis tools and/or to external analysis tools through an external network.
-
FIG. 3 is a block diagram of an example embodiment for a virtual machine (VM)host hardware system 300 having avirtual packet broker 310 and one or morevirtual TAPs 308. Thevirtual TAPs 308 receive packets from one or more virtual tap points 306A-306D within thevirtualization layer 302 for the VMhost hardware system 300. For the example embodiment depicted, atap point 306A for a first virtual TAP within thevirtual TAPs 308 is associated with packet traffic for a firstVM guest platform 156A. Atap point 306B for a second virtual TAP within thevirtual TAPs 308 is associated with packet traffic for a secondVM guest platform 156B. Atap point 306C for a third virtual TAP within thevirtual TAPs 308 is associated with packet traffic for a thirdVM guest platform 156B. And atap point 306D for a fourth virtual TAP within thevirtual TAPs 308 is associated with packet traffic for a fourthVM guest platform 156D. Thevirtual TAPs 308 thereby operate to generate virtual copies of the packet traffic at the respective tap points 306A-D, and these virtual copiedpackets 316 are provided by thevirtual packet broker 310. As described further below, thevirtual packet broker 310 analyzes the contents of the virtual copiedpackets 316 and forwards them as one or more packet streams through thevirtual switch 304 to one or more virtualpacket analysis tools 312 and/or as one or more packet streams through thevirtual switch 304 to one or moreexternal analysis tools 314 based upon packet content filters defined within thevirtual packet broker 310. - It is noted that the VM
host hardware system 300 in part operates in a similar fashion toembodiment 200 ofFIG. 2 (Prior Art). The VMhost hardware system 300 includes a central processing unit (CPU) 102 that runs ahost operating system 154, asystem oscillator 110, a real-time clock 112, a network interface card (NIC) 115, and other hardware (H/W) 114 coupled to communicate with theCPU 102 through aninterconnect bridge 108. TheNIC 115 can also include anoscillator 116, and thesystem oscillator 110 can also be directly connected to theCPU 102. The real-time clock 112 can be implemented using an integrated circuit including a real time clock (RTC) circuitry and non-volatile read only memory (RTC/NVRAM). The VM host hardware system 400 also includes ahypervisor 152 that executes as part of thevirtualization layer 302 on top of the VM host operating system (OS) 154. Thishypervisor 152 provides access to a plurality ofVM platforms VM platforms virtual switch 304 within thevirtualization layer 302. - As described above, one or more additional virtual hardware resources could also be associated with the
VM platforms host hardware system 300 makes each of theVM platforms host operating system 154, thehypervisor 152, thevirtualization layer 302, thevirtual switch 304, thevirtual TAPs 308 and related tap points 306A-D, the virtualpacket analysis tools 312, and the VM guest platforms 206A-D can be implemented, for example, as computer-readable instructions stored in a non-transitory data storage medium that are accessed and executed by one or more processing devices, such as theCPU 102, to perform the functions for the VMhost hardware platform 300. - As described above, the
virtual switch 304 provides virtual network packet communications among theVM platforms host operating system 154. In particular, thevirtual switch 304 communicates with thevirtualized NICs VM guest platforms VM guest platforms VM guest platforms external network 118. Virtual copies of the virtual packets within thevirtual switch 304 are generated by thevirtual TAPs 308 at tap points 306A-D and forwarded as virtual copiedpackets 316 to thevirtual packet broker 310. Thevirtual packet broker 310 analyzes and forwards these virtual copiedpackets 316 based upon forwarding rules defined within thevirtual packet broker 310. - It is again noted that the VM
host hardware system 300 can be implemented, for example, using one or more processing devices such as processors and/or configurable logic devices. Processors (e.g., microcontrollers, microprocessors, central processing units, etc.) can be programmed and used to control and implement the functionality described herein, and configurable logic devices such as CPLDs (complex programmable logic devices), FPGAs (field programmable gate arrays), and/or other configurable logic devices can also be programmed to perform desired functionality. -
FIG. 4 is a block diagram of an example embodiment forvirtual packet broker 310. The virtual copiedpackets 316 from the one or morevirtual TAPs 310 are received by a virtual TAP (vTAP)interface buffer 402 that can be configured, for example, to store the virtual copiedpackets 316. Apacket parser 404 then analyzes the packets and provides packet contents to one or more packet content filters 406. The packet content filters 406 are defined, for example, using aconfiguration interface 414. Theconfiguration interface 414 allows for user configuration of the content filters 406 through one or more external interfaces for the VMhost hardware system 300. The content filters 406 identify one or more packet analysis tools to receive processed packets based upon the packet contents. Thepacket formatter 408 receives the results of the packet content filter processing and modifies or reformats the packets to include one or more target identifiers (IDs) 410 for packet analysis tools to receive the packets based upon the content filters 406. As part of this process, thepacket formatter 408 can receive a copy of the original virtual copied packet from thevTAP interface buffer 402. The reformatted packets are providedtool interface buffer 412. Based upon thetarget tool IDs 410 added to the processed packets, the reformatted packets are then forwarded as one or more packet streams throughvirtual switch 304 to one or more virtualpacket analysis tools 312 and/or as one or more packet streams throughvirtual switch 304 to one or more externalpacket analysis tools 314. - It is noted that the content filters 406 can rely upon various portions of the content of virtual copied
packets 316 for forwarding decisions to the virtual and/or externalpacket analysis tools 312/314. For example, network packets typically include in part a link layer header (L2), a network layer header (L3), a transport layer header (L4), and a payload, as well as other network layers (e.g., layers within the Open Systems Interconnect (OSI) model for network communications). Information pertinent to forwarding the packet, such as source ID (identifier) and destination ID and protocol type, is usually found in the packet headers. These packets may also have various other fields and information within them, such as fields including error check information, virtual local area network (VLAN) addresses, and/or other information that may be matched and used for filtering. Further, information representing the source device may include items such as the IP address of the source device or the MAC (Media Access Control) address of the source device. It is seen, therefore, that a wide variety of source and destination identifying information may be included within the virtual copied packets, as well as other packet related information along with the data included within the payload of the packet. The packet content filters 406 utilize one or more selected portions of these packet contents to make decisions about which network analysis tools are to receive copies of the virtual copied packets received through thevirtual TAPs 308. Based upon the packet content filters 406, the appropriatetarget tool IDs 410 are added to the processed packets bypacket formatter 408. -
FIG. 5A is a diagram of an example embodiment for anetwork packet 500 that includes a source identifier (SID) 502, a destination or target identifier (TID) 504, and one or moreadditional fields 506, such as a timestamp, data payload field, and/or other fields. As indicated above, the one or morevirtual TAPs 308 can be configured to add or include a timestamp within virtual copied packets to indicate a time at which a virtual TAP receives and makes a copy of the received network packet. Thenetwork packet 500 represents one example embodiment for one of the virtual copiedpackets 316 received by thevirtual packet broker 310. -
FIG. 5B is a diagram of an example embodiment of a network packet 510 that has been modified by thepacket formatter 408 to include anencapsulation header 512. Theencapsulation header 512 is added by thepacket formatter 408 and includes a tool identifier (Tool ID)field 514 within which a tool ID is inserted by thepacket formatter 408. This tool ID is used to forward the processedvirtual packet 500 to a virtual or external network analysis tool. Theencapsulation header 512 can also include one or moreadditional fields 516, if desired. Further, it is noted that multiple versions of packet 510 could also be generated bypacket formatter 408 if the processedpacket 500 is to be forwarded to multiple different virtual or external network analysis tools. -
FIG. 5C is a diagram of an example embodiment of a network packet 520 that has been modified by thepacket formatter 408 to include anadditional field 524. The original target identifier (TID) information can be copied to and stored within thisadditional field 524. The tool identifier (Tool ID) information can then be inserted into theoriginal field 504 for the processedpacket 504 so that it replaces the original target ID information. It is noted that the target ID information could be discarded if not needed. In such an embodiment, theadditional field 524 would not be used, and the tool ID would simply replace the original target ID information infield 504. It is again noted that multiple versions of packet 520 could also be generated bypacket formatter 408 if the processedpacket 500 is to be forwarded to multiple different virtual and/or external network analysis tools. -
FIG. 5D is a diagram of an example embodiment of anetwork packet 530 that has been modified by thepacket formatter 408 to include the tool ID within a field within the original packet. As depicted, afield 532 within theother fields 506 for theoriginal packet 500 is used to hold the tool ID information. The remainingportion 524 for theother fields 506 within theoriginal packet 500 can still be included within the resultingpacket 530. It is again noted that multiple versions ofpacket 530 could also be generated bypacket formatter 408 if the processedpacket 500 is to be forwarded to multiple different virtual or external network analysis tools. - It is noted that
FIGS. 5B-D provide example embodiments of techniques that can be used by thepacket formatter 408 to add target identifiers (IDs) 410 to the processedpacket 500. It is further noted that other techniques could also be used, as desired. -
FIG. 6 provides a process flow diagram of an embodiment 600 for the operation of avirtual packet broker 310 within avirtual switch 304 to analyze copies of virtual packets and to forward them to one or morepacket analysis tools 312/314 based upon packet contents. Inblock 602 an ingress packet is received at thevirtual switch 304. Inblock 604, a determination is made with a virtual TAP (vTAP) is monitoring one or more packet flows for the packet using a virtual tap point, such as tap points 306A-D associated with virtual packet traffic forVM guest platforms 156A-D. If “NO,” then flow passes to block 606 where the packet is forwarded normally by thevirtual switch 304. If “YES,” then flow passes to block 608 where a copy of the packet is forwarded to thevirtual packet broker 310. Flow then proceeds to block 606 where the original packet is forwarded normally by thevirtual switch 304 based upon its contents. Flow also passes to block 610 where thevirtual packet broker 310 filters the copied packet based upon one or more content filters 406. Based upon the results of this filtering, thevirtual packet broker 310 tags, encapsulates, or otherwise modifies the virtual copied packet to include a tool identifier (ID) associated with a virtual or externalpacket analysis tool 312/314 to receive the virtual copied packet. As indicated above, the virtual copied packet can be designated formultiple tools 312/314 depending upon the content filters 406. Next, inblock 612, the tagged/encapsulated packet is forwarded to theappropriate tools 312/314 through thevirtual switch 304. Other variations and process steps could also be utilized while still taking advantage of the techniques described herein for using avirtual packet broker 310 to identify and direct virtual packets communicate within avirtual switch 304 to one or morenetwork analysis tools 312/314. - It is further noted that the
virtual TAPs 308 can be configured to generate timestamps associated with when virtual network packets enters thevirtual switch 304 and/or is received byvirtual TAPs 308 at atap point 306A-D. As such, thevirtual TAPs 308 can generate timestamps when a virtual packet is received by thevirtual switch 304 and can also record a residence time for a virtual packet to travel across thevirtual switch 304. The arrival timestamp and/or the residence time can then be added to the virtual copied packet. Thevirtual packet broker 310 can use this additional timestamp and/or residence time information along with other packets contents to determine which virtual copied packets are to be forwarded to one or more virtual/externalpacket analysis tools 312/314. For example, the virtual packet broker can be configured to apply a packet content filter that forwards only certain frames within a packet flow (e.g., key frames in video traffic, control packets in telecom traffic) to packet analysis tools. As another example, only selected packets within a packet flow can be forwarded based upon a time-based parameter such as 1 packet within every 1000 packets, 1 packet for every 100 milliseconds of packets, and/or based upon some other time-based parameter. Thevirtual packet broker 310 then generates new packets and/or adds the timestamp and/or residence time to new packets prior to sending them to anetwork analysis tool 312/314. It is further noted that thevirtual packet broker 310 can also drop or discard data within the packet that is not to be used in further processing. Other variations can also be implemented while still utilizing the virtual packet broker embodiments described herein. - It is also noted that a virtual network
packet analysis tool 312 can be configured to collect and analyze timing information relating to the virtual copied packets such as delay, latency, PDV (packet delay variation), and/or other time related information. As thevirtual analysis tool 312 is deployed as a VM appliance within thesame virtualization layer 302 as thevirtual switch 304, thevirtual analysis tool 312 alleviates the need to provide actual packet analysis tools within the physical network infrastructure. As such, congestion on physical ports is reduced, thereby improving performance of other packet traffic that is being communicated on physical network infrastructure and/or externally to theexternal network 118. Advantageously, the timing based analysis is performed within the virtual environment of the VMhost hardware system 300 by using avirtual monitoring tool 312 in theVM virtualization layer 302 that also includes thevirtual switch 304, the virtual packet broker 306, and thevirtual TAPs 308. The results of the analysis of virtual networkpacket analysis tools 312 can also be sent to external monitoring tools and/or other external systems, as desired, after the analysis has been completed, thereby minimizing the network packet traffic required on the physical network infrastructure. - U.S. patent application Ser. No. ______, which was concurrently filed on the same date as the present application and is entitled “NETWORK PACKET TIMING SYNCHRONIZATION FOR VIRTUAL MACHINE HOST SYSTEMS,” is hereby incorporated by reference in its entirety. This concurrently filed patent application describes example embodiments that provide timing synchronization within VM host hardware systems and that determine residence time for packets traversing a virtual switch within a virtualization layer for a VM host hardware system. The packet broker embodiments described herein can utilize one or more of the embodiments described in this concurrently filed application to provide synchronized timestamps, to determine virtual packet residence time within the
virtual switch 304, and/or for other purposes within the embodiments described herein. - It is noted that the operational and functional blocks described herein can be implemented using hardware, software or a combination of hardware and software, as desired. In addition, integrated circuits, discrete circuits or a combination of discrete and integrated circuits can be used, as desired, that are configured to perform the functionality described. Further, configurable logic devices can be used such as CPLDs (complex programmable logic devices), FPGAs (field programmable gate arrays), ASIC (application specific integrated circuit), and/or other configurable logic devices. In addition, one or more processors running software or firmware could also be used, as desired. For example, computer readable instructions embodied in a tangible medium (e.g., memory storage devices, FLASH memory, random access memory, read only memory, programmable memory devices, reprogrammable storage devices, hard drives, floppy disks, DVDs, CD-ROMs, and/or any other tangible storage medium) could be utilized including instructions that cause computer systems, processors, programmable circuitry (e.g., FPGAs, CPLDs), and/or other processing devices to perform the processes, functions, and capabilities described herein. It is further understood, therefore, that one or more of the tasks, functions, or methodologies described herein may be implemented, for example, as software or firmware and/or other instructions embodied in one or more non-transitory tangible computer readable mediums that are executed by a CPU (central processing unit), controller, microcontroller, processor, microprocessor, FPGA, CPLD, ASIC, or other suitable processing device or combination of such processing devices.
- Further modifications and alternative embodiments of this invention will be apparent to those skilled in the art in view of this description. It will be recognized, therefore, that the present invention is not limited by these example arrangements. Accordingly, this description is to be construed as illustrative only and is for the purpose of teaching those skilled in the art the manner of carrying out the invention. It is to be understood that the forms of the invention herein shown and described are to be taken as the presently preferred embodiments. Various changes may be made in the implementations and architectures. For example, equivalent elements may be substituted for those illustrated and described herein, and certain features of the invention may be utilized independently of the use of other features, all as would be apparent to one skilled in the art after having the benefit of this description of the invention.
Claims (20)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US14/515,043 US9971619B2 (en) | 2014-10-15 | 2014-10-15 | Methods and systems for forwarding network packets within virtual machine host systems |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US14/515,043 US9971619B2 (en) | 2014-10-15 | 2014-10-15 | Methods and systems for forwarding network packets within virtual machine host systems |
Publications (2)
Publication Number | Publication Date |
---|---|
US20160110211A1 true US20160110211A1 (en) | 2016-04-21 |
US9971619B2 US9971619B2 (en) | 2018-05-15 |
Family
ID=55749154
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US14/515,043 Active US9971619B2 (en) | 2014-10-15 | 2014-10-15 | Methods and systems for forwarding network packets within virtual machine host systems |
Country Status (1)
Country | Link |
---|---|
US (1) | US9971619B2 (en) |
Cited By (60)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20160301589A1 (en) * | 2015-04-10 | 2016-10-13 | Ixia | Methods, systems, and computer readable media for one-way link delay measurement |
US20170118102A1 (en) * | 2015-10-26 | 2017-04-27 | Ixia | On Demand Packet Traffic Monitoring For Network Packet Communications Within Virtual Processing Environments |
US20170163510A1 (en) * | 2015-12-07 | 2017-06-08 | Ixia | Methods, systems, and computer readable media for packet monitoring in a virtual environment |
US9686169B2 (en) | 2012-07-02 | 2017-06-20 | Ixia | Real-time highly accurate network latency measurement with low generated traffic or data requirements |
US9736804B2 (en) | 2015-04-16 | 2017-08-15 | Ixia | Methods, systems, and computer readable media for synchronizing timing among network interface cards (NICS) in a network equipment test device |
US20170264556A1 (en) * | 2015-11-09 | 2017-09-14 | Telefonaktiebolaget Lm Ericsson (Publ) | Packet processing technique for a communication network |
US9813226B2 (en) | 2015-08-05 | 2017-11-07 | Ixia | Modeling a clock |
US9923656B2 (en) | 2015-04-21 | 2018-03-20 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Methods, systems, and computer readable media for testing recovered clock quality |
WO2018097921A1 (en) | 2016-11-25 | 2018-05-31 | Extreme Networks, Inc | Correlating and load balancing ims traffic in a visibility network |
WO2018111567A1 (en) * | 2016-12-15 | 2018-06-21 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Instance based management and control for vm platforms in virtual processing environments |
US10019333B2 (en) | 2015-04-16 | 2018-07-10 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Methods, systems, and computer readable media for emulating network devices with different clocks |
US10116528B2 (en) | 2015-10-02 | 2018-10-30 | Keysight Technologies Singapore (Holdings) Ptd Ltd | Direct network traffic monitoring within VM platforms in virtual processing environments |
US10135702B2 (en) | 2015-11-12 | 2018-11-20 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Methods, systems, and computer readable media for testing network function virtualization (NFV) |
US10142263B2 (en) | 2017-02-21 | 2018-11-27 | Keysight Technologies Singapore (Holdings) Pte Ltd | Packet deduplication for network packet monitoring in virtual processing environments |
US20180351966A1 (en) * | 2017-06-05 | 2018-12-06 | Honeywell International Inc. | Systems and methods for performing external data validation for aircraft onboard systems |
US10171425B2 (en) | 2016-12-15 | 2019-01-01 | Keysight Technologies Singapore (Holdings) Pte Ltd | Active firewall control for network traffic sessions within virtual processing platforms |
CN109426649A (en) * | 2017-08-30 | 2019-03-05 | 英特尔公司 | For handling the technology of network packet in acting on behalf of grid architecture |
US10425321B2 (en) | 2017-04-25 | 2019-09-24 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Methods, systems, and computer readable media for testing time sensitive network (TSN) elements |
US10511508B2 (en) | 2016-05-05 | 2019-12-17 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Network packet forwarding systems and methods to push packet pre-processing tasks to network tap devices |
US10541901B2 (en) | 2017-09-19 | 2020-01-21 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Methods, systems and computer readable media for optimizing placement of virtual network visibility components |
US10609054B2 (en) | 2017-04-07 | 2020-03-31 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Methods, systems, and computer readable media for monitoring, adjusting, and utilizing latency associated with accessing distributed computing resources |
US10652112B2 (en) | 2015-10-02 | 2020-05-12 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Network traffic pre-classification within VM platforms in virtual processing environments |
US10728135B2 (en) | 2017-10-13 | 2020-07-28 | Keysight Technologies, Inc. | Location based test agent deployment in virtual processing environments |
US10764169B2 (en) | 2017-10-09 | 2020-09-01 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for testing virtual network components deployed in virtual private clouds (VPCs) |
US10778406B2 (en) | 2018-11-26 | 2020-09-15 | Mellanox Technologies, Ltd. | Synthesized clock synchronization between networks devices |
US10810034B2 (en) * | 2017-01-31 | 2020-10-20 | Vmware, Inc. | Transparent deployment of meta visor into guest operating system network traffic |
US10812349B2 (en) | 2018-02-17 | 2020-10-20 | Keysight Technologies, Inc. | Methods, systems and computer readable media for triggering on-demand dynamic activation of cloud-based network visibility tools |
US10965392B2 (en) | 2019-01-25 | 2021-03-30 | Keysight Technologies, Inc. | Active network tap supporting time sensitive network (TSN) standards |
US11012327B2 (en) | 2017-06-19 | 2021-05-18 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Drop detection and protection for network packet monitoring in virtual processing environments |
US11038770B2 (en) | 2018-02-01 | 2021-06-15 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for managing deployment and maintenance of network tools |
US11070304B1 (en) | 2020-02-25 | 2021-07-20 | Mellanox Technologies, Ltd. | Physical hardware clock chaining |
US11075886B2 (en) | 2016-12-15 | 2021-07-27 | Keysight Technologies Singapore (Sales) Pte. Ltd. | In-session splitting of network traffic sessions for server traffic monitoring |
US11140055B2 (en) | 2017-08-24 | 2021-10-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for enabling active measurements in internet of things (IoT) systems |
US11144423B2 (en) | 2016-12-28 | 2021-10-12 | Telefonaktiebolaget Lm Ericsson (Publ) | Dynamic management of monitoring tasks in a cloud environment |
US11188371B2 (en) * | 2016-05-12 | 2021-11-30 | Telefonaktiebolaget Lm Ericsson (Publ) | Monitoring controller and a method performed thereby for monitoring network performance |
US11258681B2 (en) | 2016-12-16 | 2022-02-22 | Nicira, Inc. | Application assessment and visibility for micro-segmentation of a network deployment |
US11283454B2 (en) | 2018-11-26 | 2022-03-22 | Mellanox Technologies, Ltd. | Synthesized clock synchronization between network devices |
US11323354B1 (en) | 2020-10-09 | 2022-05-03 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for network testing using switch emulation |
US11329955B2 (en) * | 2018-01-24 | 2022-05-10 | Vmware, Inc. | Remote session based micro-segmentation |
US20220210062A1 (en) * | 2020-12-30 | 2022-06-30 | Oracle International Corporation | Layer-2 networking span port in a virtualized cloud environment |
US11398968B2 (en) | 2018-07-17 | 2022-07-26 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for testing virtualized network functions and related infrastructure |
US11431656B2 (en) * | 2020-05-19 | 2022-08-30 | Fujitsu Limited | Switch identification method and non-transitory computer-readable recording medium |
US11483227B2 (en) | 2020-10-13 | 2022-10-25 | Keysight Technologies, Inc. | Methods, systems and computer readable media for active queue management |
US11483127B2 (en) | 2018-11-18 | 2022-10-25 | Mellanox Technologies, Ltd. | Clock synchronization |
US11489745B2 (en) | 2019-10-15 | 2022-11-01 | Keysight Technologies, Inc. | Methods, systems and computer readable media for providing a declarative network monitoring environment |
US11543852B2 (en) | 2019-11-07 | 2023-01-03 | Mellanox Technologies, Ltd. | Multihost clock synchronization |
US11552871B2 (en) | 2020-06-14 | 2023-01-10 | Mellanox Technologies, Ltd. | Receive-side timestamp accuracy |
US11563768B2 (en) | 2019-01-31 | 2023-01-24 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for detecting and mitigating effects of timing attacks in time sensitive networks |
US11588854B2 (en) | 2019-12-19 | 2023-02-21 | Vmware, Inc. | User interface for defining security groups |
US11588609B2 (en) | 2021-01-14 | 2023-02-21 | Mellanox Technologies, Ltd. | Hardware clock with built-in accuracy check |
US11606427B2 (en) | 2020-12-14 | 2023-03-14 | Mellanox Technologies, Ltd. | Software-controlled clock synchronization of network devices |
US11621893B2 (en) | 2021-02-09 | 2023-04-04 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for establishing dynamic agent associations in a cloud computing environment |
US20230135322A1 (en) * | 2020-11-23 | 2023-05-04 | Verizon Patent And Licensing Inc. | Systems and methods for automated remote network performance monitoring |
US11706014B1 (en) | 2022-01-20 | 2023-07-18 | Mellanox Technologies, Ltd. | Clock synchronization loop |
US11755349B2 (en) | 2019-01-16 | 2023-09-12 | Vmware, Inc | Secure digital workspace using machine learning and microsegmentation |
US11818040B2 (en) | 2020-07-14 | 2023-11-14 | Oracle International Corporation | Systems and methods for a VLAN switching and routing service |
US11835999B2 (en) | 2022-01-18 | 2023-12-05 | Mellanox Technologies, Ltd. | Controller which adjusts clock frequency based on received symbol rate |
US11853254B1 (en) | 2022-10-07 | 2023-12-26 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for exposing data processing unit (DPU) traffic in a smartswitch |
US11907754B2 (en) | 2021-12-14 | 2024-02-20 | Mellanox Technologies, Ltd. | System to trigger time-dependent action |
US11917045B2 (en) | 2022-07-24 | 2024-02-27 | Mellanox Technologies, Ltd. | Scalable synchronization of network devices |
Families Citing this family (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10979368B2 (en) * | 2017-08-02 | 2021-04-13 | Nebbiolo Technologies, Inc. | Architecture for converged industrial control and real time applications |
US10419327B2 (en) * | 2017-10-12 | 2019-09-17 | Big Switch Networks, Inc. | Systems and methods for controlling switches to record network packets using a traffic monitoring network |
Citations (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20090073895A1 (en) * | 2007-09-17 | 2009-03-19 | Dennis Morgan | Method and apparatus for dynamic switching and real time security control on virtualized systems |
US8098677B1 (en) * | 2009-07-31 | 2012-01-17 | Anue Systems, Inc. | Superset packet forwarding for overlapping filters and related systems and methods |
US20120185914A1 (en) * | 2005-09-19 | 2012-07-19 | Vmware, Inc. | Implementing network traffic management for virtual and physical machines |
US20120230202A1 (en) * | 2011-03-07 | 2012-09-13 | Oracle International Corporation | Virtual network interface with packet filtering hooks |
US20120284712A1 (en) * | 2011-05-04 | 2012-11-08 | Chitti Nimmagadda | Systems and methods for sr-iov pass-thru via an intermediary device |
US20150100670A1 (en) * | 2013-10-04 | 2015-04-09 | International Business Machines Corporation | Transporting multi-destination networking traffic by sending repetitive unicast |
US9008080B1 (en) * | 2013-02-25 | 2015-04-14 | Big Switch Networks, Inc. | Systems and methods for controlling switches to monitor network traffic |
US20150244617A1 (en) * | 2012-06-06 | 2015-08-27 | Juniper Networks, Inc. | Physical path determination for virtual network packet flows |
US20150281120A1 (en) * | 2014-03-31 | 2015-10-01 | Juniper Networks, Inc. | Flow-control within a high-performance, scalable and drop-free data center switch fabric |
US9166992B1 (en) * | 2012-05-01 | 2015-10-20 | Amazon Technologies, Inc. | Methods and apparatus for providing network traffic monitoring services |
US20160026490A1 (en) * | 2013-03-15 | 2016-01-28 | Telefonaktiebolaget Lm Ericsson | Hypervisor and physical machine and respective methods therein for performance measurement |
US20160087859A1 (en) * | 2014-09-23 | 2016-03-24 | Chia-Chee Kuan | Monitor a data center infrastructure |
US20160087861A1 (en) * | 2014-09-23 | 2016-03-24 | Chia-Chee Kuan | Infrastructure performance monitoring |
Family Cites Families (34)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7386838B2 (en) | 2003-04-03 | 2008-06-10 | International Business Machines Corporation | Method and apparatus for obtaining profile data for use in optimizing computer programming code |
US20070143453A1 (en) | 2005-12-21 | 2007-06-21 | Sbc Knowledge Ventures L.P. | System and method for configuring a packet-switched network based on a network quality survey |
US8296759B1 (en) | 2006-03-31 | 2012-10-23 | Vmware, Inc. | Offloading operations to a replicate virtual machine |
US8064485B1 (en) | 2008-11-14 | 2011-11-22 | Cisco Technology, Inc. | System and method for providing quality inter-domain network time transport |
CA3204215A1 (en) | 2009-04-01 | 2010-10-07 | Nicira, Inc. | Method and apparatus for implementing and managing virtual switches |
US8401007B2 (en) | 2009-04-06 | 2013-03-19 | Avaya Inc. | Network synchronization over IP networks |
US8018972B2 (en) | 2009-06-30 | 2011-09-13 | Alcatel Lucent | Timing over packet performance |
US8767752B1 (en) | 2010-05-03 | 2014-07-01 | Pluribus Networks, Inc. | Method and system for resource coherency and analysis in a network |
US8989187B2 (en) | 2010-06-04 | 2015-03-24 | Coraid, Inc. | Method and system of scaling a cloud computing network |
US8630837B2 (en) | 2010-06-17 | 2014-01-14 | The Aerospace Corporation | Multicast emulation |
US9110703B2 (en) | 2011-06-07 | 2015-08-18 | Hewlett-Packard Development Company, L.P. | Virtual machine packet processing |
US8935457B2 (en) | 2011-07-29 | 2015-01-13 | International Business Machines Corporation | Network filtering in a virtualized environment |
US8694994B1 (en) | 2011-09-07 | 2014-04-08 | Amazon Technologies, Inc. | Optimization of packet processing by delaying a processor from entering an idle state |
US9065770B2 (en) | 2011-09-08 | 2015-06-23 | Ixia | Traffic item impairment emulation |
US9185056B2 (en) | 2011-09-20 | 2015-11-10 | Big Switch Networks, Inc. | System and methods for controlling network traffic through virtual switches |
US8560663B2 (en) | 2011-09-30 | 2013-10-15 | Telefonaktiebolaget L M Ericsson (Publ) | Using MPLS for virtual private cloud network isolation in openflow-enabled cloud computing |
EP2748713B1 (en) * | 2011-11-15 | 2021-08-25 | Nicira Inc. | Load balancing and destination network address translation middleboxes |
US8964553B2 (en) | 2011-12-13 | 2015-02-24 | Ixia | Network impairment unit with bandwidth-constrained packet duplication |
US8879552B2 (en) | 2012-02-22 | 2014-11-04 | Telefonaktiebolaget L M Ericsson (Publ) | Precision time protocol offloading in a PTP boundary clock |
US8989188B2 (en) | 2012-05-10 | 2015-03-24 | Cisco Technology, Inc. | Preventing leaks among private virtual local area network ports due to configuration changes in a headless mode |
US9331930B1 (en) | 2012-09-04 | 2016-05-03 | Big Switch Networks, Inc. | Systems and methods for forwarding network packets in a network using network domain topology information |
US9152552B2 (en) | 2012-09-11 | 2015-10-06 | International Business Machines Corporation | Securing sensitive information in a network cloud |
WO2014046610A1 (en) | 2012-09-21 | 2014-03-27 | Agency For Science, Technology And Research | A circuit arrangement and method of determining a priority of packet scheduling |
US9350558B2 (en) | 2013-01-09 | 2016-05-24 | Dell Products L.P. | Systems and methods for providing multicast routing in an overlay network |
US9317310B2 (en) | 2013-01-31 | 2016-04-19 | Broadcom Corporation | Systems and methods for handling virtual machine packets |
US9379973B2 (en) | 2013-02-11 | 2016-06-28 | Cisco Technology, Inc. | Binary compatible extension architecture in an openflow compliant network environment |
US9485187B2 (en) | 2013-07-08 | 2016-11-01 | Futurewei Technologies, Inc. | Intelligent software-defined networking based service paths |
US9497125B2 (en) | 2013-07-28 | 2016-11-15 | Mellanox Technologies Ltd. | Congestion control enforcement in a virtualized environment |
US9282033B2 (en) | 2013-08-06 | 2016-03-08 | Cisco Technology, Inc. | Intelligent handling of virtual machine mobility in large data center environments |
WO2015031272A1 (en) | 2013-08-26 | 2015-03-05 | Vmware, Inc. | Cpu scheduler configured to support latency sensitive virtual machines |
US9680772B2 (en) | 2013-09-09 | 2017-06-13 | Vmware, Inc. | System and method for managing configuration of virtual switches in a virtual machine network |
US9762497B2 (en) | 2013-11-26 | 2017-09-12 | Avago Technologies General Ip (Singapore) Pte. Ltd. | System, method and apparatus for network congestion management and network resource isolation |
US9825854B2 (en) | 2014-03-27 | 2017-11-21 | Nicira, Inc. | Host architecture for efficient cloud service access |
US9344265B2 (en) | 2014-10-15 | 2016-05-17 | Anue Systems, Inc. | Network packet timing synchronization for virtual machine host systems |
-
2014
- 2014-10-15 US US14/515,043 patent/US9971619B2/en active Active
Patent Citations (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20120185914A1 (en) * | 2005-09-19 | 2012-07-19 | Vmware, Inc. | Implementing network traffic management for virtual and physical machines |
US8972981B2 (en) * | 2005-09-19 | 2015-03-03 | Vmware, Inc. | Implementing network traffic management for virtual and physical machines |
US20090073895A1 (en) * | 2007-09-17 | 2009-03-19 | Dennis Morgan | Method and apparatus for dynamic switching and real time security control on virtualized systems |
US8098677B1 (en) * | 2009-07-31 | 2012-01-17 | Anue Systems, Inc. | Superset packet forwarding for overlapping filters and related systems and methods |
US20120230202A1 (en) * | 2011-03-07 | 2012-09-13 | Oracle International Corporation | Virtual network interface with packet filtering hooks |
US8861369B2 (en) * | 2011-03-07 | 2014-10-14 | Oracle International Corporation | Virtual network interface with packet filtering hooks |
US20120284712A1 (en) * | 2011-05-04 | 2012-11-08 | Chitti Nimmagadda | Systems and methods for sr-iov pass-thru via an intermediary device |
US9166992B1 (en) * | 2012-05-01 | 2015-10-20 | Amazon Technologies, Inc. | Methods and apparatus for providing network traffic monitoring services |
US20150244617A1 (en) * | 2012-06-06 | 2015-08-27 | Juniper Networks, Inc. | Physical path determination for virtual network packet flows |
US9008080B1 (en) * | 2013-02-25 | 2015-04-14 | Big Switch Networks, Inc. | Systems and methods for controlling switches to monitor network traffic |
US20160026490A1 (en) * | 2013-03-15 | 2016-01-28 | Telefonaktiebolaget Lm Ericsson | Hypervisor and physical machine and respective methods therein for performance measurement |
US20150100670A1 (en) * | 2013-10-04 | 2015-04-09 | International Business Machines Corporation | Transporting multi-destination networking traffic by sending repetitive unicast |
US20150281120A1 (en) * | 2014-03-31 | 2015-10-01 | Juniper Networks, Inc. | Flow-control within a high-performance, scalable and drop-free data center switch fabric |
US9485191B2 (en) * | 2014-03-31 | 2016-11-01 | Juniper Networks, Inc. | Flow-control within a high-performance, scalable and drop-free data center switch fabric |
US20160087859A1 (en) * | 2014-09-23 | 2016-03-24 | Chia-Chee Kuan | Monitor a data center infrastructure |
US20160087861A1 (en) * | 2014-09-23 | 2016-03-24 | Chia-Chee Kuan | Infrastructure performance monitoring |
US9647909B2 (en) * | 2014-09-23 | 2017-05-09 | Uila Networks, Inc. | Monitor a data center infrastructure |
Cited By (77)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9686169B2 (en) | 2012-07-02 | 2017-06-20 | Ixia | Real-time highly accurate network latency measurement with low generated traffic or data requirements |
US20160301589A1 (en) * | 2015-04-10 | 2016-10-13 | Ixia | Methods, systems, and computer readable media for one-way link delay measurement |
US9699051B2 (en) * | 2015-04-10 | 2017-07-04 | Ixia | Methods, systems, and computer readable media for one-way link delay measurement |
US9736804B2 (en) | 2015-04-16 | 2017-08-15 | Ixia | Methods, systems, and computer readable media for synchronizing timing among network interface cards (NICS) in a network equipment test device |
US10019333B2 (en) | 2015-04-16 | 2018-07-10 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Methods, systems, and computer readable media for emulating network devices with different clocks |
US9923656B2 (en) | 2015-04-21 | 2018-03-20 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Methods, systems, and computer readable media for testing recovered clock quality |
US9813226B2 (en) | 2015-08-05 | 2017-11-07 | Ixia | Modeling a clock |
US10116528B2 (en) | 2015-10-02 | 2018-10-30 | Keysight Technologies Singapore (Holdings) Ptd Ltd | Direct network traffic monitoring within VM platforms in virtual processing environments |
US10652112B2 (en) | 2015-10-02 | 2020-05-12 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Network traffic pre-classification within VM platforms in virtual processing environments |
US20170118102A1 (en) * | 2015-10-26 | 2017-04-27 | Ixia | On Demand Packet Traffic Monitoring For Network Packet Communications Within Virtual Processing Environments |
US10142212B2 (en) * | 2015-10-26 | 2018-11-27 | Keysight Technologies Singapore (Holdings) Pte Ltd | On demand packet traffic monitoring for network packet communications within virtual processing environments |
US10361962B2 (en) * | 2015-11-09 | 2019-07-23 | Telefonaktiebolaget Lm Ericsson (Publ) | Packet processing technique for a communication network |
US20170264556A1 (en) * | 2015-11-09 | 2017-09-14 | Telefonaktiebolaget Lm Ericsson (Publ) | Packet processing technique for a communication network |
US10135702B2 (en) | 2015-11-12 | 2018-11-20 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Methods, systems, and computer readable media for testing network function virtualization (NFV) |
US9967165B2 (en) * | 2015-12-07 | 2018-05-08 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Methods, systems, and computer readable media for packet monitoring in a virtual environment |
US20170163510A1 (en) * | 2015-12-07 | 2017-06-08 | Ixia | Methods, systems, and computer readable media for packet monitoring in a virtual environment |
US10511508B2 (en) | 2016-05-05 | 2019-12-17 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Network packet forwarding systems and methods to push packet pre-processing tasks to network tap devices |
US11188371B2 (en) * | 2016-05-12 | 2021-11-30 | Telefonaktiebolaget Lm Ericsson (Publ) | Monitoring controller and a method performed thereby for monitoring network performance |
WO2018097921A1 (en) | 2016-11-25 | 2018-05-31 | Extreme Networks, Inc | Correlating and load balancing ims traffic in a visibility network |
US10965738B2 (en) | 2016-11-25 | 2021-03-30 | Extreme Networks, Inc. | Correlating and load balancing IMS traffic in a visibility network |
EP3545660A4 (en) * | 2016-11-25 | 2020-07-08 | Extreme Networks, Inc | Correlating and load balancing ims traffic in a visibility network |
US10171425B2 (en) | 2016-12-15 | 2019-01-01 | Keysight Technologies Singapore (Holdings) Pte Ltd | Active firewall control for network traffic sessions within virtual processing platforms |
US11075886B2 (en) | 2016-12-15 | 2021-07-27 | Keysight Technologies Singapore (Sales) Pte. Ltd. | In-session splitting of network traffic sessions for server traffic monitoring |
US10178003B2 (en) | 2016-12-15 | 2019-01-08 | Keysight Technologies Singapore (Holdings) Pte Ltd | Instance based management and control for VM platforms in virtual processing environments |
WO2018111567A1 (en) * | 2016-12-15 | 2018-06-21 | Keysight Technologies Singapore (Holdings) Pte. Ltd. | Instance based management and control for vm platforms in virtual processing environments |
US11750481B2 (en) | 2016-12-16 | 2023-09-05 | Nicira, Inc. | Application assessment and visibility for micro-segmentation of a network deployment |
US11258681B2 (en) | 2016-12-16 | 2022-02-22 | Nicira, Inc. | Application assessment and visibility for micro-segmentation of a network deployment |
US11144423B2 (en) | 2016-12-28 | 2021-10-12 | Telefonaktiebolaget Lm Ericsson (Publ) | Dynamic management of monitoring tasks in a cloud environment |
US10810034B2 (en) * | 2017-01-31 | 2020-10-20 | Vmware, Inc. | Transparent deployment of meta visor into guest operating system network traffic |
US10142263B2 (en) | 2017-02-21 | 2018-11-27 | Keysight Technologies Singapore (Holdings) Pte Ltd | Packet deduplication for network packet monitoring in virtual processing environments |
US10609054B2 (en) | 2017-04-07 | 2020-03-31 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Methods, systems, and computer readable media for monitoring, adjusting, and utilizing latency associated with accessing distributed computing resources |
US10623297B2 (en) | 2017-04-25 | 2020-04-14 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Methods, systems, and computer readable media for testing scheduling fidelity in a time sensitive network |
US10425321B2 (en) | 2017-04-25 | 2019-09-24 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Methods, systems, and computer readable media for testing time sensitive network (TSN) elements |
US20180351966A1 (en) * | 2017-06-05 | 2018-12-06 | Honeywell International Inc. | Systems and methods for performing external data validation for aircraft onboard systems |
US10616241B2 (en) * | 2017-06-05 | 2020-04-07 | Honeywell International Inc. | Systems and methods for performing external data validation for aircraft onboard systems |
US11012327B2 (en) | 2017-06-19 | 2021-05-18 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Drop detection and protection for network packet monitoring in virtual processing environments |
US11140055B2 (en) | 2017-08-24 | 2021-10-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for enabling active measurements in internet of things (IoT) systems |
CN109426649A (en) * | 2017-08-30 | 2019-03-05 | 英特尔公司 | For handling the technology of network packet in acting on behalf of grid architecture |
US10541901B2 (en) | 2017-09-19 | 2020-01-21 | Keysight Technologies Singapore (Sales) Pte. Ltd. | Methods, systems and computer readable media for optimizing placement of virtual network visibility components |
US10764169B2 (en) | 2017-10-09 | 2020-09-01 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for testing virtual network components deployed in virtual private clouds (VPCs) |
US10728135B2 (en) | 2017-10-13 | 2020-07-28 | Keysight Technologies, Inc. | Location based test agent deployment in virtual processing environments |
US11329955B2 (en) * | 2018-01-24 | 2022-05-10 | Vmware, Inc. | Remote session based micro-segmentation |
US11924167B2 (en) | 2018-01-24 | 2024-03-05 | Vmware, Inc. | Remote session based micro-segmentation |
US11038770B2 (en) | 2018-02-01 | 2021-06-15 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for managing deployment and maintenance of network tools |
US10812349B2 (en) | 2018-02-17 | 2020-10-20 | Keysight Technologies, Inc. | Methods, systems and computer readable media for triggering on-demand dynamic activation of cloud-based network visibility tools |
US11398968B2 (en) | 2018-07-17 | 2022-07-26 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for testing virtualized network functions and related infrastructure |
US11483127B2 (en) | 2018-11-18 | 2022-10-25 | Mellanox Technologies, Ltd. | Clock synchronization |
US11637557B2 (en) | 2018-11-26 | 2023-04-25 | Mellanox Technologies, Ltd. | Synthesized clock synchronization between network devices |
US11283454B2 (en) | 2018-11-26 | 2022-03-22 | Mellanox Technologies, Ltd. | Synthesized clock synchronization between network devices |
US10778406B2 (en) | 2018-11-26 | 2020-09-15 | Mellanox Technologies, Ltd. | Synthesized clock synchronization between networks devices |
US11755349B2 (en) | 2019-01-16 | 2023-09-12 | Vmware, Inc | Secure digital workspace using machine learning and microsegmentation |
US10965392B2 (en) | 2019-01-25 | 2021-03-30 | Keysight Technologies, Inc. | Active network tap supporting time sensitive network (TSN) standards |
US11563768B2 (en) | 2019-01-31 | 2023-01-24 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for detecting and mitigating effects of timing attacks in time sensitive networks |
US11489745B2 (en) | 2019-10-15 | 2022-11-01 | Keysight Technologies, Inc. | Methods, systems and computer readable media for providing a declarative network monitoring environment |
US11543852B2 (en) | 2019-11-07 | 2023-01-03 | Mellanox Technologies, Ltd. | Multihost clock synchronization |
US11588854B2 (en) | 2019-12-19 | 2023-02-21 | Vmware, Inc. | User interface for defining security groups |
US11070304B1 (en) | 2020-02-25 | 2021-07-20 | Mellanox Technologies, Ltd. | Physical hardware clock chaining |
US11431656B2 (en) * | 2020-05-19 | 2022-08-30 | Fujitsu Limited | Switch identification method and non-transitory computer-readable recording medium |
US11552871B2 (en) | 2020-06-14 | 2023-01-10 | Mellanox Technologies, Ltd. | Receive-side timestamp accuracy |
US11818040B2 (en) | 2020-07-14 | 2023-11-14 | Oracle International Corporation | Systems and methods for a VLAN switching and routing service |
US11831544B2 (en) | 2020-07-14 | 2023-11-28 | Oracle International Corporation | Virtual layer-2 network |
US11876708B2 (en) | 2020-07-14 | 2024-01-16 | Oracle International Corporation | Interface-based ACLs in a layer-2 network |
US11323354B1 (en) | 2020-10-09 | 2022-05-03 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for network testing using switch emulation |
US11483227B2 (en) | 2020-10-13 | 2022-10-25 | Keysight Technologies, Inc. | Methods, systems and computer readable media for active queue management |
US20230135322A1 (en) * | 2020-11-23 | 2023-05-04 | Verizon Patent And Licensing Inc. | Systems and methods for automated remote network performance monitoring |
US11606427B2 (en) | 2020-12-14 | 2023-03-14 | Mellanox Technologies, Ltd. | Software-controlled clock synchronization of network devices |
US20220210062A1 (en) * | 2020-12-30 | 2022-06-30 | Oracle International Corporation | Layer-2 networking span port in a virtualized cloud environment |
US11765080B2 (en) * | 2020-12-30 | 2023-09-19 | Oracle International Corporation | Layer-2 networking span port in a virtualized cloud environment |
US11757773B2 (en) | 2020-12-30 | 2023-09-12 | Oracle International Corporation | Layer-2 networking storm control in a virtualized cloud environment |
US11909636B2 (en) | 2020-12-30 | 2024-02-20 | Oracle International Corporation | Layer-2 networking using access control lists in a virtualized cloud environment |
US11588609B2 (en) | 2021-01-14 | 2023-02-21 | Mellanox Technologies, Ltd. | Hardware clock with built-in accuracy check |
US11621893B2 (en) | 2021-02-09 | 2023-04-04 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for establishing dynamic agent associations in a cloud computing environment |
US11907754B2 (en) | 2021-12-14 | 2024-02-20 | Mellanox Technologies, Ltd. | System to trigger time-dependent action |
US11835999B2 (en) | 2022-01-18 | 2023-12-05 | Mellanox Technologies, Ltd. | Controller which adjusts clock frequency based on received symbol rate |
US11706014B1 (en) | 2022-01-20 | 2023-07-18 | Mellanox Technologies, Ltd. | Clock synchronization loop |
US11917045B2 (en) | 2022-07-24 | 2024-02-27 | Mellanox Technologies, Ltd. | Scalable synchronization of network devices |
US11853254B1 (en) | 2022-10-07 | 2023-12-26 | Keysight Technologies, Inc. | Methods, systems, and computer readable media for exposing data processing unit (DPU) traffic in a smartswitch |
Also Published As
Publication number | Publication date |
---|---|
US9971619B2 (en) | 2018-05-15 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US9971619B2 (en) | Methods and systems for forwarding network packets within virtual machine host systems | |
US9971620B2 (en) | Methods and systems for network packet impairment within virtual machine host systems | |
US10116528B2 (en) | Direct network traffic monitoring within VM platforms in virtual processing environments | |
US9935851B2 (en) | Technologies for determining sensor placement and topology | |
EP2845350B1 (en) | Method and apparatus for providing tenant information for network flows | |
US9178828B2 (en) | Architecture for agentless service insertion | |
US10177936B2 (en) | Quality of service (QoS) for multi-tenant-aware overlay virtual networks | |
US9699064B2 (en) | Method and an apparatus for network state re-construction in software defined networking | |
US9838277B2 (en) | Packet copy management for service chain processing within virtual processing systems | |
US10313205B2 (en) | Context-sensitive command whitelisting for centralized troubleshooting tool | |
US20170099197A1 (en) | Network Traffic Pre-Classification Within VM Platforms In Virtual Processing Environments | |
US20160099853A1 (en) | Active and passive dataplane performance monitoring of service function chaining | |
US20160308766A1 (en) | Unified Mapping Tables With Source/Destination Labels For Network Packet Forwarding Systems | |
US11012327B2 (en) | Drop detection and protection for network packet monitoring in virtual processing environments | |
US10142263B2 (en) | Packet deduplication for network packet monitoring in virtual processing environments | |
US20140365634A1 (en) | Programmable Network Analytics Processing via an Inspect/Apply-Action Applied to Physical and Virtual Entities | |
US11743100B2 (en) | Systems and methods for sideline processing in a virtual network function | |
US10142168B2 (en) | Technologies for event based debugging of data center switching | |
US20230006904A1 (en) | Using network interface cards having processing units to determine latency | |
US11349736B1 (en) | Flow-based latency measurement for logical overlay network traffic | |
US20230198676A1 (en) | Packet drop monitoring in a virtual router | |
US10931523B2 (en) | Configuration change monitoring in software-defined networking environments | |
Goldberg et al. | Datacenter Network Visualization in Multi-Tenant Environments | |
WO2017058137A1 (en) | Latency tracking metadata for a network switch data packet |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: ANUE SYSTEMS, INC., TEXAS Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:KARNES, JOSHUA D.;REEL/FRAME:033955/0413 Effective date: 20141015 |
|
AS | Assignment |
Owner name: KEYSIGHT TECHNOLOGIES SINGAPORE (HOLDINGS) PTE. LT Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ANUE SYSTEMS, INC.;REEL/FRAME:043898/0920 Effective date: 20170930 |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
AS | Assignment |
Owner name: KEYSIGHT TECHNOLOGIES SINGAPORE (SALES) PTE. LTD., Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:KEYSIGHT TECHNOLOGIES SINGAPORE (HOLDINGS) PTE. LTD.;REEL/FRAME:048225/0065 Effective date: 20181001 Owner name: KEYSIGHT TECHNOLOGIES SINGAPORE (SALES) PTE. LTD., SINGAPORE Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:KEYSIGHT TECHNOLOGIES SINGAPORE (HOLDINGS) PTE. LTD.;REEL/FRAME:048225/0065 Effective date: 20181001 |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment: 4 |